AALPHAS PRIVACY POLICY

At Aalphas, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy outlines how Aalphas collects, uses, and safeguards your data in accordance with applicable laws and regulations.

1. INFORMATION COLLECTION:

At Aalphas, we employ various methods to gather pertinent information to enhance your browsing experience and facilitate transactions. When you visit our website, we automatically collect specific details about your device, such as your web browser, IP address, time zone, and cookies stored on your device. Additionally, as you navigate through our site, we gather data regarding the individual web pages or products you view, as well as the websites or search terms that led you to our site. We refer to this automatically-collected information as "Device Information."

We employ sophisticated technologies, including cookies, log files, web beacons, tags, and pixels, to effectively capture Device Information. These mechanisms allow us to streamline your interaction with our website, personalize your browsing experience, and optimize the functionality of our site.

Furthermore, when you engage in transactions on our website, we collect specific details from you to facilitate the process. This may include your name, billing address, shipping address, payment information (such as credit card numbers), email address, and phone number. We refer to this information as "Order Information."

Our commitment to privacy extends to every facet of your online experience with us. Rest assured that we handle your personal information with the utmost care and employ industry-standard security measures to safeguard your data against unauthorized access, disclosure, alteration, or destruction.

Should you have any concerns or inquiries regarding our information collection practices, please do not hesitate to contact us. We are dedicated to providing transparency and ensuring that your privacy rights are upheld at all times.

2. USE OF INFORMATION:

At Aalphas, we are committed to utilizing your personal information responsibly and transparently to enhance your shopping experience and provide you with exceptional service. Here's how we leverage the information we collect:

• Fulfillment of Orders: The primary purpose of collecting your Order Information is to fulfill orders placed through our website efficiently. This includes processing payments securely, arranging for shipping, generating invoices, and issuing order confirmations. By gathering accurate billing and shipping details, we ensure that your purchases reach you in a timely manner.
• Communication: We use your contact information, such as your email address and phone number, to communicate with you regarding your orders, provide updates on shipping status, and address any inquiries or concerns you may have. Our aim is to keep you informed throughout the purchasing process and provide prompt assistance whenever needed.
• Risk Assessment and Fraud Prevention: To maintain the integrity of our platform and protect both our customers and our business, we employ advanced risk assessment techniques. By analysing Order Information and Device Information, including IP addresses, we can identify and mitigate potential risks of fraudulent activities, ensuring a safe and secure shopping environment for all.
• Personalized Marketing and Advertising: With your consent, we may use your Order Information and browsing history to tailor our marketing communications and advertising efforts to your preferences. By understanding your interests and shopping behaviours, we strive to deliver relevant promotions, product recommendations, and exclusive offers that resonate with you.
• Website Optimization: The Device Information we collect helps us improve and optimize your browsing experience on our website. By analysing how customers interact with our site, we can identify areas for enhancement, streamline navigation, and enhance functionality. Our goal is to provide you with a seamless and intuitive online shopping experience.
• Analytics and Insights: We leverage data analytics to gain valuable insights into customer behaviour, trends, and preferences. By analysing aggregated and anonymized data, we can identify patterns, assess the effectiveness of marketing campaigns, and make informed business decisions to better serve our customers.

At Aalphas, we prioritize the protection of your personal information and adhere to strict privacy standards. We are committed to using your data responsibly and in accordance with applicable laws and regulations. If you have any questions or concerns about how we use your personal information, please don't hesitate to contact us. Your privacy and satisfaction are our top priorities.

3. THIRD-PARTY DISCLOSURE:

Here's how we handle third-party disclosure:

• Trusted Service Providers: We may disclose your personal information to trusted third-party service providers who assist us in conducting our business operations. These service providers are carefully selected based on their expertise, reliability, and commitment to data security.
• Examples of Third-Party Partnerships:

1. Shipping Partners: When you place an order with us, we may share your shipping address and contact details with our shipping partners to ensure the timely delivery of your purchases. This collaboration allows us to provide you with accurate tracking information and efficient shipping services.
2. Payment Processors: To process payments securely, we partner with reputable payment processors who adhere to stringent security standards and encryption protocols. Your payment information, such as credit card numbers, is encrypted and transmitted securely to prevent unauthorized access.
3. Marketing and Analytics Providers: We collaborate with marketing and analytics providers to gain insights into customer behavior, track website performance, and measure the effectiveness of our marketing campaigns. These partners help us deliver personalized content, promotions, and recommendations tailored to your interests and preferences.
   • Data Protection Agreements: Before sharing any personal information with third-party partners, we enter into data protection agreements to ensure that your data is handled in accordance with applicable privacy laws and regulations. These agreements outline the responsibilities of each party regarding data security, confidentiality, and compliance with privacy standards.
   • Legal Compliance and Protection of Rights: We may disclose your personal information to comply with applicable laws and regulations, respond to lawful requests for information from government authorities, or protect our rights, property, or safety, as well as those of our customers and the public. This may include responding to subpoenas, court orders, or other legal processes requiring the disclosure of personal data.
4. COOKIES AND TRACKING TECHNOLOGIES:

Our website may use cookies and similar tracking technologies to enhance your browsing experience and collect information about how you interact with our site. You have the option to disable cookies in your browser settings, although this may affect certain functionalities of the website.

5. DATA RETENTION: DATA RETENTION

At Aalphas, we recognize the importance of responsibly managing the retention of your personal information. Our data retention practices are designed to balance the need to retain data for operational purposes with the respect for your privacy rights. Here's how we handle data retention:

• Purpose of Data Retention: We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law. The primary purposes for retaining your data include processing orders, providing customer support, complying with legal obligations, conducting internal research and analysis, and maintaining accurate business records.
• Retention Period: The specific retention period for different types of personal information may vary depending on the nature of the data and the purposes for which it is processed. We regularly review our data retention policies and procedures to ensure compliance with applicable laws and regulations, as well as industry best practices.
• Data Minimization: We adhere to the principle of data minimization by retaining only the personal information that is necessary for the fulfillment of our business purposes. We avoid collecting excessive or irrelevant data and strive to limit the retention of personal information to the minimum required for the intended purposes.
• Secure Storage: Your personal information is stored securely in accordance with industry standards and best practices to prevent unauthorized access, disclosure, alteration, or destruction. We employ robust security measures, including encryption, access controls, and regular security audits, to safeguard your data against potential risks.
• Legal and Regulatory Compliance: We ensure that our data retention practices comply with applicable legal and regulatory requirements, including data protection laws such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). We also maintain documentation of our data retention policies and procedures to demonstrate accountability and transparency in our data management practices.
• Data Deletion Requests: If you wish to have your personal information deleted from our records, you may submit a request to us using the contact information provided in our Privacy Policy. Upon receiving a valid deletion request, we will promptly delete or anonymize your personal information in accordance with our data retention policies and legal obligations.

6. YOUR RIGHTS:

At Aalphas, we are committed to upholding your rights regarding the processing of your personal information.

• Right to Access: You have the right to request access to the personal information we hold about you. This includes information about the purposes of the processing, the categories of personal data involved, and the recipients or categories of recipients to whom the data has been disclosed.
• Right to Rectification: If you believe that any of the personal information, we hold about you is inaccurate or incomplete, you have the right to request rectification. We will promptly correct any inaccuracies and ensure that your data is kept up to date.
• Right to Erasure: You have the right to request the erasure of your personal information under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or processed, or when you withdraw your consent to the processing and there is no other legal basis for the processing.
• Right to Restriction of Processing: You have the right to request the restriction of processing of your personal information under certain circumstances, such as when you contest the accuracy of the data or when the processing is unlawful but you oppose the erasure of the data.
• Right to Data Portability: You have the right to receive a copy of your personal information in a structured, commonly used, and machine-readable format, and to transmit that data to another data controller, where technically feasible.
• Right to Object: You have the right to object to the processing of your personal information under certain circumstances, such as when the processing is based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: If we are processing your personal information based on your consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint: If you believe that we have infringed upon your data protection rights, you have the right to lodge a complaint with the relevant supervisory authority responsible for data protection in your jurisdiction.

7. DATA BREACH NOTIFICATION

At Aalphas, we prioritize the security and integrity of your personal information. In the unlikely event of a data breach compromising the confidentiality, availability, or integrity of your data, we have established robust procedures for detecting, investigating, and responding promptly and effectively to such incidents. Our Data Breach Notification protocol includes:

• Detection and Assessment: We employ advanced security measures and monitoring systems to promptly detect any unauthorized access, disclosure, or alteration of personal data. Upon detection, our dedicated incident response team conducts a thorough assessment to determine the scope and impact of the breach.
• Notification to Authorities: In accordance with applicable data protection laws and regulations, we promptly notify relevant supervisory authorities and regulatory bodies of any data breaches that pose a risk to the rights and freedoms of individuals. We provide comprehensive details of the breach, including the nature of the incident, the categories of personal data affected, and our remediation efforts.
• Communication with Affected Individuals: We prioritize transparent and proactive communication with affected individuals to keep them informed about the breach and its potential impact on their personal information. Depending on the severity of the breach and legal requirements, we may notify affected individuals directly via email, website announcements, or other appropriate channels.
• Mitigation and Remediation: We take immediate steps to mitigate the impact of the breach and prevent further unauthorized access or harm. This may include suspending affected services, enhancing security controls, and offering support to affected individuals, such as identity theft protection services or credit monitoring.
• Continuous Improvement: Following any data breach incident, we conduct a comprehensive post-incident review to identify lessons learned, strengthen our security posture, and implement preventive measures to reduce the risk of future breaches. We are committed to continuous improvement and ongoing vigilance in safeguarding your personal information.

8. INTERNATIONAL DATA TRANSFERS

At Aalphas, we recognize that personal data may be transferred across international borders as part of our global operations and service delivery. To ensure the lawful and secure transfer of data, we adhere to the following principles and mechanisms for international data transfers:

• Legal Basis for Transfer: We transfer personal data only when permitted by applicable data protection laws and regulations, such as the General Data Protection Regulation (GDPR). We ensure that transfers are based on lawful grounds, such as the data subject's explicit consent, the existence of appropriate safeguards, or the necessity of the transfer for the performance of a contract.
• Standard Contractual Clauses: Where required by law, we enter into legally binding agreements, such as Standard Contractual Clauses (SCCs) approved by the European Commission, with recipients of personal data outside the European Economic Area (EEA). These clauses provide adequate safeguards for protecting the privacy and security of transferred data.
• Binding Corporate Rules: In cases where multiple entities within our organization are involved in international data transfers, we may implement Binding Corporate Rules (BCRs) to ensure consistent data protection standards across our global operations. BCRs establish a framework for intra-group transfers of personal data based on approved principles and oversight mechanisms.
• Certification Programs and Frameworks: We may participate in recognized certification programs or adhere to industry-recognized frameworks, such as the EU-U.S. Privacy Shield or the Asia-Pacific Economic Cooperation (APEC) Cross-Border Privacy Rules (CBPR) system, to facilitate lawful data transfers and demonstrate our commitment to privacy compliance.
• Data Localization and Data Sovereignty: In jurisdictions with specific data localization requirements or restrictions on cross-border data transfers, we comply with applicable laws and regulations by storing personal data within the designated geographic boundaries or obtaining necessary approvals or authorizations for international transfers

9. UPDATES TO PRIVACY POLICY:

Aalphas reserves the right to update or modify this Privacy Policy at any time without prior notice. We encourage you to review this policy periodically to stay informed about how we collect, use, and protect your personal information.